
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft
File: djSthmVu_mxF5O-Zj5S2l6w5vvE.mft (raw, json)
Hash identifier: I8M3YWnf6tcTmjcr394i+i5pf7VH/jIUsf9xfpPSJkU=
Subject key identifier: 4F:DF:CC:95:D7:55:A3:F0:CA:ED:E9:E3:C4:96:90:C2:87:B0:D7:8F
Authority key identifier: 76:34:AD:86:65:6E:FE:6C:45:E4:EF:99:8F:94:B6:97:AC:39:BE:F1
Certificate issuer: /CN=A91B23D9/serialNumber=7634AD86656EFE6C45E4EF998F94B697AC39BEF1
Certificate serial: 010D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft
Manifest number: ED
Signing time: Wed 25 Mar 2026 05:38:46 +0000
Manifest this update: Wed 25 Mar 2026 05:38:46 +0000
Manifest next update: Wed 01 Apr 2026 05:38:46 +0000
Files and hashes: 1: djSthmVu_mxF5O-Zj5S2l6w5vvE.crl (hash: L/hwjA2vOb+3hlUSv1G8q3t+0+J0A4VPYaQaYzRkQ/o=)
2: 7BC585BEC9DD11EF98B1E263C4F9AE02.roa (hash: gOLrlN2EfbwTp4zsFTkIHkRkrBvQ0xLDRVKKWvZfbic=)
3: 5FF7DA8AC9DD11EF9A19CE57C4F9AE02.roa (hash: c4VFZAceUdJlng/FeQRaHeNTf/QP511PnqvINvkog+A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.crl
rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:38:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 269 (0x10d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B23D9, serialNumber=7634AD86656EFE6C45E4EF998F94B697AC39BEF1
Validity
Not Before: Mar 25 05:38:46 2026 GMT
Not After : Apr 1 05:38:46 2026 GMT
Subject: CN=69c374e6-5ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:25:c4:5a:f9:fb:e4:e4:03:ba:d0:5c:4f:6b:
6c:99:5f:a6:e7:80:58:bf:72:b4:e6:9b:a0:54:b1:
f9:e6:52:03:93:44:d2:14:a2:a3:69:4a:1c:b3:c5:
af:98:e7:ec:27:44:c6:05:28:42:7b:7f:3c:90:b1:
33:51:5e:f7:42:b2:c9:46:b1:7f:af:9c:ea:a8:38:
3c:9d:ec:35:7d:3d:cc:a7:1a:2f:a2:8e:13:f3:ae:
c9:9a:e0:33:38:23:4e:f1:4d:46:a5:8a:e6:38:06:
a2:cf:e8:c9:49:0f:62:15:9c:3a:ee:ff:a0:dd:1d:
67:93:40:48:ee:fb:8e:69:f2:7d:9c:ec:98:8b:35:
ca:03:56:07:50:87:1d:8f:2d:11:ad:e1:5b:b5:16:
5a:78:4c:4d:20:2b:30:b0:7f:42:fe:2d:fe:ab:86:
d8:64:f8:67:01:e9:c7:e6:7e:24:87:10:b8:c2:10:
c0:64:81:3b:44:d3:cb:60:95:bb:8e:bf:9b:30:71:
8f:43:8f:10:4c:a7:b9:2b:90:66:c8:8d:e9:cb:2b:
30:af:da:ec:b9:ac:c3:09:c0:52:7a:72:b3:50:8e:
98:72:27:97:6c:5f:8e:c5:0e:38:9d:b6:12:5c:fd:
d1:16:9c:16:f2:7a:23:d3:b3:40:17:aa:87:4a:8f:
91:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DF:CC:95:D7:55:A3:F0:CA:ED:E9:E3:C4:96:90:C2:87:B0:D7:8F
X509v3 Authority Key Identifier:
keyid:76:34:AD:86:65:6E:FE:6C:45:E4:EF:99:8F:94:B6:97:AC:39:BE:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:26:d0:3e:15:6f:ba:56:1e:50:d1:8e:92:a6:09:a5:fe:c9:
be:68:00:45:ba:dc:19:e2:d4:66:e2:f7:8d:ab:59:6f:02:0c:
e3:dc:dc:76:0b:3d:7c:de:03:fc:ee:f4:41:e2:a1:45:ac:8f:
f7:06:9d:c5:92:14:df:93:24:2a:75:fb:11:c7:01:f6:ba:4c:
af:08:42:c4:01:ed:65:ac:b5:a9:be:dc:d4:2e:18:7a:b3:e5:
ec:60:65:22:c1:29:84:3c:05:90:f6:6e:e4:da:17:56:e2:94:
76:5b:3c:3c:a1:4f:9a:66:f3:a9:e6:58:a2:e9:64:3c:e4:bf:
c4:99:ff:54:c1:1c:b6:55:7a:eb:23:41:9d:f7:e1:d5:4a:de:
d1:f4:83:22:95:8c:52:b3:52:27:d0:e6:86:7f:bd:5d:1a:80:
cc:fb:fd:13:d8:77:27:5a:1b:60:45:45:58:3a:d3:00:0a:bf:
c5:d0:8e:9a:cc:2f:d2:f6:8d:d4:04:57:9d:7c:4e:b8:95:0c:
e4:e4:7a:48:87:d8:87:c9:77:9b:69:44:55:c1:9f:6f:36:73:
22:10:22:83:29:2e:01:77:a9:c9:89:2e:c8:a0:45:79:65:01:
b2:75:f9:3d:11:96:98:ab:00:14:62:b0:c3:94:d1:5e:4e:62:
51:de:bb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:18:12 2026 by rpki-client